apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  annotations:
    cert-duration: 43800h0m0s
  creationTimestamp: "2025-10-11T10:52:43Z"
  generation: 1
  labels:
    osp-rootca-issuer-internal: ""
  name: rootca-internal
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: b58026d9-78f6-41aa-860f-3c207e5b077b
  resourceVersion: "33843"
  uid: e6b0454c-5de1-4f84-a31b-6758e89e6a11
spec:
  ca:
    secretName: rootca-internal
status:
  conditions:
  - lastTransitionTime: "2025-10-11T10:52:44Z"
    message: Signing CA verified
    observedGeneration: 1
    reason: KeyPairVerified
    status: "True"
    type: Ready